CSE 508

CSE 508 Network Security

Fall 2004

Welcome to the CSE 508 home page. Please visit your your Personalized Course Information Page.

Don't use email to resolve problems accessing the lab or for course-related questions. Please use the discussion forum, where your questions will be answered in a reasonable period of time, usually within several hours on week days.

Announcements

12/23/04Final grades posted. Statistics on various assignments and exams is as shown below.

	HW1	A1	Midterm_1	HW2	Midterm_2	A2	A3	HW3	Q1	Final	TOTAL
Quartile 1	85	32	87	44	86	43	55	56	15	114	70.23
Median	94	35	95	46	94	44	75	62	18	134	74.56
Quartile 3	99	35	105	50	103	45	85	66	20	144	80.26
Maximum	106	35	132	55	117	45	100	71	20	171	88.09

12/17/04 Project demo times posted. Check the discussion forum.
12/15/04 Homework 3 solutions posted
12/6/04 Homework 2 grades released.
12/6/04 Homework 3 posted.
11/29/04 Deadline for A2 extended. See course discussion board for details.
11/23/04 Project teams have to be formed by 11/24. Please send emails to the Instructor. Note that two teams should merge to form project teams.
11/19/04 Your total scores are reported correctly now, when you go to your personalized web page.
11/19/04 Project description posted.
11/19/04 Weightages for exams and assignments finalized.
11/16/04 Lab assignment 2 posted. It is due 11/29/04.
11/16/04 Midterm 2 grades released. The average score was 93, and the max was 117. The quartiles were 86, 94, and 103. This represents a 10 percentage point improvement over midterm 1.

Course Description

In the class, we will discuss the principles and practice of network security. Note that CSE 508 previously used to cover network as well as computer system security. Now the system security topics have been moved to another course CSE 509/409. The objective of the course is to provide a broad overview of issues and approaches, while exposing students to recent research in this area. The topics covered and the approximate number of lectures devoted to each of the topics will be as shown below.

I. Introduction (1 Lecture)

Security threats
Defensive mechanisms
Problems and Pitfalls
II. Principles (13)

Mathematical Foundations (3)

Principles of Communication Security (10)

secret-key cryptography (1.5)
public-key cryptography (3)
secure hash functions and random numbers (1)
digital signatures (1)
authentication protocols (2)
cryptographic key management (1.5)

III. Applications (4)

Authentication (Kerberos, X.509) (1)
E-mail security (PGP) (0.5)
Remote access/Virtual Private Networks (IPSec, SSH) (1.5)
Web security (SSL, SET) (1)
IV. Practice of Securing Systems (5)

Background (0.5)
Firewalls (1.5)
Network-based attacks and intrusion detection (3)
V. Advanced Topics/Recent Research (3)

Threshold Cryptography (1)
Elliptic Curve Cryptography (1)
TBD (1)

Class Place and Time:

Lectures: Tue, Thu 3:50pm to 5:10pm CS Building 2310/11

Instructor:

R . Sekar
Office: 2313E Computer Science
email: sekar@cs.sunysb.edu
Office Hours: Tue-Thu 2:30pm to 3:30pm

TAs:

Umesh Kumar
email: umesh@cs.sunysb.edu
Office Hours: Mon 4pm to 5pm, Fri 2:30 to 3:30pm, CS 2110

Hun Jeong Kang
email: hjkang@cs.sunysb.edu
Office Hours: Fri 11am to noon, CS 2110

Texts:

Cryptography and Network Security: Principles and Practice (3rd edition), by William Stallings, Prentice-Hall.
Please check out Resource page and the Errata for this book provided by its author, William Stallings

Exams:

Mid-term I: October 7 3:50pm to 5:10pm, Harriman 137

Mid-term II: November 4 3:50pm to 5:10pm, Harriman 137

Final: December 16 2:00pm to 4:30pm, Light Engineering 102

Grading

Your final grades will be based on your performance in homework assignments, programming assignments, pop-quizzes, exams and a project. The weightages for these components will be as follows.

4% for HW1 and HW2, 3% for HW3 (11% total)
7% for lab assignments (14% total)
13% for the project
16% for midterm 1, 17% for midterm 2 (33% total)
2% for Quiz
27% for final

You will get full credit for written homeworks and quizzes as long as you

turn in all your homeworks andtake all quizzes, and
score 75% or more in each one of the homeworks and quizzes.

More generally, if you score m_1 through m_k in written homeworks, your score for these assignments will be given by (4/3)*average(min(75, m_1),...,min(75, m_k)). In effect, there is no benefit in scoring above 75 points on written homeworks and quizzes. This has been done so as to remove the main incentive for copying and other unethical practices in homeworks. The exact same formula will be used for quizzes, but the intent here is to reduce student anxiety about quizzes.

Copying homework solutions from a fellow student or from the Internet, and all other forms of academic dishonesty, are considered serious offenses, and will be prosecuted to the maximum extent permitted by university policies.

Prerequisites

You must have completed CSE 310 (networks), or an equivalent course.

Special Needs

If you have a physical, psychological, medical or learning disability that may impact on your ability to carry out assigned course work, I would urge that you contact the staff in the Disabled Student Services office (DSS), n the ECC building (where the Computer Store used to be), 632-6748v/TDD. DSS will review your concerns and determine, with you, what accommodations are necessary and appropriate. All information and documentation of disability is confidential

Mid-term I:	October 7	3:50pm to 5:10pm, Harriman 137
Mid-term II:	November 4	3:50pm to 5:10pm, Harriman 137
Final:	December 16	2:00pm to 4:30pm, Light Engineering 102